10517 matches found
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-linode, trivy, crossplane-provider-aws-elasticache, syft, crossplane-provider-aws-cloudfront, crossplane-provider-azure-storage, spire-server, k3s, zot, terragrunt, opentofu, scorecard, gitlab-kas, k9s, terraform-provider-azurerm, kargo,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: kyverno, aactl, gh, spire-server, zot, docker-cli-buildx, neuvector-sigstore-interface, gitsign, zarf, ko, policy-controller, vexctl, kubescape, cosign, teleport, tflint, kyverno-notation-aws, falcoctl, witness, sigstore-scaffolding, tekton-chains, skaffold,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: kyverno, trivy, aactl, gh, spire-server, zot, docker-cli-buildx, neuvector-sigstore-interface, gitsign, zarf, ko, policy-controller, docker, vexctl, trivy-operator, kubescape, slsa-verifier, cosign, teleport, tflint, kyverno-notation-aws, falcoctl, witness,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: gitleaks, docker-machine-driver-linode, lvm-driver, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, spire-server, xeol, kubeflow-pipelines, k3s, restic, wgcf, sriov-network-device-plugin, grafana-operator, kubernetes-csi-external-attacher,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: kyverno, trivy, aactl, gh, spire-server, zot, neuvector-sigstore-interface, gitsign, zarf, ko, policy-controller, docker, vexctl, trivy-operator, kubescape, slsa-verifier, cosign, teleport, tflint, kyverno-notation-aws, falcoctl, rekor, witness, sigstore-scaffolding,...
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: kyverno, trivy, aactl, gh, spire-server, zot, neuvector-sigstore-interface, gitsign, zarf, ko, policy-controller, docker, vexctl, trivy-operator, kubescape, slsa-verifier, cosign, teleport, tflint, kyverno-notation-aws, falcoctl, rekor, witness, sigstore-scaffolding,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: trivy, opa, k3s, zot, wgcf, opentofu, undock, swagger, dive, prometheus-operator, nodetaint, ipfs-cluster, grafana-rollout-operator, libnvidia-container, helm-operator, cni-plugins, nri-consul, kind, aws-eks-pod-identity-agent, kubernetes-csi-driver-nfs, wal-g,...
GO-2024-2825 vulnerabilities
Vulnerabilities for packages: gitleaks, kubewatch, trivy, opa, confluent-common-docker, kubernetes-ingress-defaultbackend, zot, wgcf, flux-image-reflector-controller, grafana-operator, petname, wireguard-go, capslock, newrelic-prometheus-configurator, scorecard, cert-exporter, timoni, hubble-ui,...
VulnCheck KEV: CVE-2026-45298
Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy the documented quickstart, no DOZZLEAUTHPROVIDER set, POST /api/notifications/test-webhook is reachable without authentication and forwards an attacker-controlled URL into a WebhookDispatcher that...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...
CVE-Web-Framework
Web Framework CVE Vulnerability Reproduction Testbed Warn...
CVE-2026-73483 Flowise before 3.1.3 Sandbox Escape via Puppeteer
Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...
CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
CVE-2026-73519
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
Exploit for CVE-2026-17106
CopyEscape — PoC de CVE-2026-17106 Proof of Concept educati...
CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-18171
Docker Sandboxes sbx applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writable at its shared-export path, so unprivileged cod...
